Description
Multiple vulnerabilities exist in Zomplog, including SQL injection and cross-site scripting. Various input parameters are not properly sanitized.
Impact
SQL injection allows attackers to extract and modify database contents including user credentials. XSS enables session hijacking and potential administrative compromise.
Solution
Apply parameterized queries and output encoding. Consider migrating to a maintained blogging platform.